Format: 1.8 Date: Wed, 20 Jun 2018 08:00:56 -0400 Source: openssl1.0 Binary: libssl1.0.0 libssl1.0-dev libcrypto1.0.0-udeb libssl1.0.0-udeb openssl1.0 Architecture: s390x s390x_translations Version: 1.0.2n-1ubuntu5.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl1.0-dev - Secure Sockets Layer toolkit - development files libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl1.0 - Secure Sockets Layer toolkit 1.0 - cryptographic utility Changes: openssl1.0 (1.0.2n-1ubuntu5.1) bionic-security; urgency=medium . * SECURITY UPDATE: ECDSA key extraction side channel - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c. - CVE-2018-0495 * SECURITY UPDATE: denial of service via long prime values - debian/patches/CVE-2018-0732.patch: reject excessively large primes in DH key generation in crypto/dh/dh_key.c. - CVE-2018-0732 * SECURITY UPDATE: RSA cache timing side channel attack - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in crypto/rsa/rsa_gen.c. - CVE-2018-0737 Checksums-Sha1: f0036f3a54bdf67186e5c38113d5ae6585c11cef 570248 libcrypto1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb fd03f4ba086d35ceeeab6c8b94105d65064aa2d5 1055032 libssl1.0-dev_1.0.2n-1ubuntu5.1_s390x.deb d789b4cef4e7201fd9efbaa8eb367b1dc7c68b26 3129832 libssl1.0.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb 2e5b182478b2804861cd37bc1d507bf27af2ed1e 126828 libssl1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb b46d1194a056ea0a0295d6724282170e33acdf76 776736 libssl1.0.0_1.0.2n-1ubuntu5.1_s390x.deb 50c59045233048ac2d9b80aa32368f64e9e8478a 595240 openssl1.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb b5f8dc233fb14caa1dcc4d907cc002a8437d6419 7032 openssl1.0_1.0.2n-1ubuntu5.1_s390x.buildinfo 5d8e149fd813a6e8e3121b41bbb1a217f26883d6 187368 openssl1.0_1.0.2n-1ubuntu5.1_s390x.deb ddfe136f8a667a74c7280dcb0144128ce053b159 20518 openssl1.0_1.0.2n-1ubuntu5.1_s390x_translations.tar.gz Checksums-Sha256: 0705d049b8f936cac5cf498efb93dcde4cfd077a131357aefe9f11ac4f87fea0 570248 libcrypto1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb d3c3c1441a47a51ff90ac7ad260cbac4e2775e2fdd5843f1d18f117f72bbf215 1055032 libssl1.0-dev_1.0.2n-1ubuntu5.1_s390x.deb 15e92a39ff2eb9d63b65cb31a01d21323a8a03a1e4b2430d254014e43e2d266b 3129832 libssl1.0.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb 208e54bfd4815e97ba56d051ee522960387e3c57298e1451c83580c263d48fde 126828 libssl1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb 08939e59097a82f9939f74a6db5827019b1d9138f693641b77bf8d79090c719a 776736 libssl1.0.0_1.0.2n-1ubuntu5.1_s390x.deb de07daac95f8098ae381c002c207cfb5d14a6bcf9b4d4b17f1f59ba6bc2ff271 595240 openssl1.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb 86c7b244e9c126a2dcb9f0c39afcd5cb1473c50a6fef3ef9843314bd1447ee2d 7032 openssl1.0_1.0.2n-1ubuntu5.1_s390x.buildinfo bb6864a8595611e60b289c6b2aa12bebb418b6bd5164154d55b92fc565583c1a 187368 openssl1.0_1.0.2n-1ubuntu5.1_s390x.deb f68dc8378148a56ff4cd1b8609519d43b389dd2843c32f32dcae45cffd06272e 20518 openssl1.0_1.0.2n-1ubuntu5.1_s390x_translations.tar.gz Files: 7a0cf6b18d951e6c2c31ea98193c7b01 570248 debian-installer optional libcrypto1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb 3b0b9d0ed13b7c0de2f1ac46d59d22b0 1055032 libdevel optional libssl1.0-dev_1.0.2n-1ubuntu5.1_s390x.deb cd967daeeaf2d2a526c826c78b6229cc 3129832 debug optional libssl1.0.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb 5d999b9a5488c13e29bd9961606d4436 126828 debian-installer optional libssl1.0.0-udeb_1.0.2n-1ubuntu5.1_s390x.udeb a6e8ab467b4fe4a8a52ca17d9454053a 776736 libs important libssl1.0.0_1.0.2n-1ubuntu5.1_s390x.deb f701d37c1cee36f77ecbe534b7343780 595240 debug optional openssl1.0-dbgsym_1.0.2n-1ubuntu5.1_s390x.ddeb 6f1546c8eef570aafee56cbed4e3fa7b 7032 utils optional openssl1.0_1.0.2n-1ubuntu5.1_s390x.buildinfo 4d3fc6b01c1acde3eab050fcf22ad8bc 187368 utils optional openssl1.0_1.0.2n-1ubuntu5.1_s390x.deb f1ffa4ebf3cc3444051b4356b5cf7b3b 20518 raw-translations - openssl1.0_1.0.2n-1ubuntu5.1_s390x_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb